Insights on e-commerce, web development and digital solutions
Ransomware and human error hit every shop. This guide shows how tested 3-2-1 backups, defined RTO/RPO targets and a documented recovery plan form a resilient contingency plan - and how disaster recovery differs from monitoring.
A shop's largest attack surface is not the frontend, it is the build. How supply chain attacks via npm and Composer actually unfold, and which measures catch them beforehand.
As soon as a shop gets an AI advisor, a new attack surface opens up: language models do not separate instruction from data. What that means in practice and which layers hold.
The Cyber Resilience Act affects everyone placing products with digital elements on the EU market. The reporting duty applies from 11 Sep 2026, CE marking and SBOM from 11 Dec 2027. What online shops should do now.
From 2026 all 64 new PCI DSS 4.x requirements are binding. Script management, MFA and tokenisation for online shops, implemented pragmatically.
289 billion euros in cybercrime damage in Germany. Learn how AI attacks work and how to effectively protect your business.
NIS2 has been German law since December 2025. Learn which obligations apply to online retailers and how to implement the requirements.
You decide which optional data processing to allow.
Our anonymous reach measurement runs without cookies and without IP storage — we do not ask for consent for it because none is legally required.
Strictly required: language preference, core site functions and storing your cookie choice. Without these the site does not work.
Stores your preferences in your browser's local storage (e.g. light/dark appearance, accessibility options). Improves comfort but is not strictly required.
Records your interactions (clicks, scrolling, inputs) pseudonymously so we can spot usability issues. Form field inputs are masked automatically before storage; your IP address is not saved with the recording. Served from our own domain, no external tool. Opt-in, revocable any time.
Allows measurement of advertising campaigns (internal UTM attribution, e.g. whether a visit came from an ad). No external advertising cookies.